Nortel 3050 Command Reference Manual page 121

Table 31
Socks Settings Menu Options (/cfg/ssl/server/socks) (cont'd.)
Command Syntax and Usage
methods user|none
commands <connect, bind>
Copyright © 2007 Nortel Networks
.
/cfg/ssl/server <id> /socks Socks Settings Configuration 121
Sets the preferred Socks authentication method(s) for Socks protocol
version 5. For clients connecting with Socks protocol version 4, these
settings are ignored because version 4 does not support authentication.
The authentication method you set here comes into play when a remote
user connects to the VPN using the SSL VPN client (that is . not
through the Portal).
The available options are:
•
user: Username/Password client authentication is required.
•
none: No client authentication is required. When setting the Socks
authentication method to none, make sure you also specify a default
user access group (using the defgroup command).
The default Socks authentication method is set to user.
Note: The Socks authentication method you specify here interacts with
the authentication methods defined in the VPN using the /cfg/vpn
#/aaa/auth command. When the Socks method is set to user, a
remote user connecting to the VPN through the SSL VPN client is
prompted for the user name and password through a pop-up window.
These credentials are then verified against one of the authentication
methods defined in the VPN. If a match is found, the user is authenticated
and the user's group membership is determined.
Sets the permitted Socks client command(s). If you enter more than
one command, separate the entries using comma (,).
The available options are:
•
connect: Allows the Socks client to send a CONNECT request to
the server when it wants to establish a connection to an application
server (the destination host).
•
bind: Allows the Socks client to send a BIND request when it wants
to prepare for an inbound connection from an application server (the
destination host). A client BIND request is only sent after a primary
connection to the application server has been established with a
CONNECT request.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007